Re: Format String Bugs/Remote Shellcode

[Crispin Cowan <crispin () WIREX COM>]

Barry Russell wrote:

> I was wondering if anyone knows any good texts on Format String Bugs and
> texts on constructing shellcode for remote exploits? Please help anyway
> you can, thanks.

As it happens, I'm in the final stages of writing a FormatGuard paper.
Here's the URLs from our related work section:

   * http://plan9.hert.org/papers/format.html
   * http://www.guardent.com/rd_whtpr_formatNewsham.html
   * http://julianor.tripod.com/usfs.html
   * http://oliver.efri.hr/~crv/security/bugs/mUNIXes/format3.html
   * http://security-archive.merton.ox.ac.uk/security-audit-200009/0084.html
   * http://www.striker.ottawa.on.ca/~aland/pscan/
   * http://www.atstake.com/research/advisories/2000/a101200-1.txt

Crispin

--
Crispin Cowan, Ph.D.
Chief Research Scientist, WireX Communications, Inc. http://wirex.com
Free Hardened Linux Distribution:                    http://immunix.org